目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Ivanti 厂商漏洞列表 / CVE 中文分析 408

Ivanti 厂商相关 408 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Ivanti 专注于企业IT服务管理与安全解决方案，其核心产品涵盖身份认证、终端管理及远程访问服务。历史漏洞多集中于远程代码执行、身份验证绕过及权限提升，常因配置缺陷或逻辑漏洞被利用。2024年初爆发的“Ivanti Connect Secure”零日漏洞事件影响广泛，导致全球大量企业网络面临风险，凸显其供应链安全的重要性，促使业界加强对该厂商产品的审计与监控。

Top products by Ivanti: Avalanche Endpoint Manager Connect Secure EPM Endpoint Manager Mobile Secure Access Client EPMM Sentry Workspace Control Xtraction Cloud Services Application CSA (Cloud Services Appliance) Neurons for ITSM ICS Wavelink ITSM DSM Ivanti Neurons for ITSM Neurons for ITSM (On-Premise) MobileIron Core Desktop and Server Management Ivanti Endpoint Manager Secure Access Linux Secure Access Client Windows Automation Neurons for ITSM (on-prem) User Workspace Manager Neurons Patch for Intune Desktop & Server Management (DSM) Neurons for ITSM (On-Premises)
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-105426 Ivanti EPMM 12.10 输入验证漏洞 — Endpoint Manager Mobile CWE-20 6.7 Medium 2026-11-10
CVE-2026-123181 Ivanti Sentry 10.7.4/10.8.3 前版本路径遍历漏洞 — Sentry CWE-22 5.5 Medium 2026-11-10
CVE-2026-123179 Ivanti Sentry 10.8.3 前版本拒绝服务漏洞 — Sentry CWE-1188 5.5 Medium 2026-11-10
CVE-2026-105669 Ivanti Sentry 10.8.3 前参数注入漏洞 — Sentry CWE-88 6.7 Medium 2026-11-10
CVE-2026-105425 Ivanti Sentry/EPMM 远程代码执行漏洞 — Sentry CWE-78 7.2 High 2026-11-10
CVE-2026-121683 Ivanti 5.0.8 云应用存在认证绕过漏洞 — Cloud Services Application CWE-306 9.4 Critical 2026-11-10
CVE-2026-18128 Ivanti Endpoint Manager 2024 SU8 明文传输漏洞 — Endpoint Manager CWE-319 6.8 Medium 2026-11-10
CVE-2026-121653 Ivanti Endpoint Manager 2024 SU8 前核心 SQL 注入漏洞 — Endpoint Manager CWE-89 9.8 Critical 2026-11-10
CVE-2026-105813 Ivanti UWM 2026.4 前敏感信息明文存储漏洞 — User Workspace Manager CWE-312 6.3 Medium 2026-11-10
CVE-2026-118527 Ivanti Connect Secure 可预测文件名漏洞 — Connect Secure CWE-340 4.3 Medium 2026-11-03
CVE-2026-111357 Ivanti Connect Secure 22.8R2.4 权限提升漏洞 — Connect Secure CWE-829 7.0 High 2026-10-15
CVE-2026-109412 Ivanti Neurons Patch for Intune认证接口信息泄露 — Neurons Patch for Intune CWE-749 9.9 Critical 2026-10-13
CVE-2026-106047 Ivanti Xtraction 模板导出路径穿越漏洞 — Xtraction CWE-22 7.7 High 2026-10-13
CVE-2026-106043 Ivanti Xtraction<2026.4缺失认证漏洞 — Xtraction CWE-306 7.5 High 2026-10-13
CVE-2026-106042 Ivanti Xtraction路径遍历致凭证泄露漏洞 — Xtraction CWE-73 9.9 Critical 2026-10-13
CVE-2026-106035 Ivanti Xtraction Cloud Sync信息泄露漏洞 — Xtraction CWE-532 5.5 Medium 2026-10-13
CVE-2026-106034 Ivanti Xtraction 路径穿越漏洞 — Xtraction CWE-22 5.0 Medium 2026-10-13
CVE-2026-104935 ICS小于25.1.3.0认证绕过漏洞 — Connect Secure CWE-290 8.6 High 2026-10-13
CVE-2026-12647 Ivanti Neurons for ITSM 授权问题漏洞 — Ivanti Neurons for ITSM CWE-862 9.9 Critical 2026-09-08
CVE-2026-12646 Ivanti Neurons for ITSM 授权问题漏洞 — Ivanti Neurons for ITSM CWE-862 9.9 Critical 2026-09-08
CVE-2026-12645 Ivanti Neurons for ITSM 授权问题漏洞 — Ivanti Neurons for ITSM CWE-862 9.9 Critical 2026-09-08
CVE-2026-83527 Ivanti Sentry 授权问题漏洞 — Sentry CWE-288 8.1 High 2026-09-08
CVE-2026-12648 Ivanti Neurons for ITSM 反序列化注入漏洞 — Neurons for ITSM CWE-502 8.8 High 2026-09-08
CVE-2026-12650 Ivanti Neurons for ITSM 反序列化注入漏洞 — Neurons for ITSM CWE-502 9.9 Critical 2026-09-08
CVE-2026-12651 Ivanti Neurons for ITSM 反序列化注入漏洞 — Neurons for ITSM CWE-502 8.8 High 2026-09-08
CVE-2026-12745 Ivanti Neurons for ITSM 反序列化注入漏洞 — Neurons for ITSM CWE-502 9.8 Critical 2026-09-08
CVE-2026-12744 Ivanti Neurons for ITSM 反序列化注入漏洞 — Neurons for ITSM CWE-502 9.8 Critical 2026-09-08
CVE-2026-18851 Ivanti Endpoint Manager Mobile 授权问题漏洞 — Endpoint Manager Mobile CWE-862 8.8 High 2026-09-08
CVE-2026-18129 Ivanti endpoint manager 加密问题漏洞 — Endpoint Manager CWE-295 8.1 High 2026-08-11
CVE-2026-18127 Ivanti endpoint manager 输入验证错误漏洞 — Endpoint Manager CWE-73 7.7 High 2026-08-11

本页汇总了 Ivanti 厂商截至目前公开的全部 408 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。